@bongos/core 1.19.413 → 1.19.415

package/public-landing/projects.states.json

@@ -1,14 +1,15 @@
 {
-  "_": "The hub's states for modules/ui-design/kit/render.js (task 1003320): name → url + actions + expectations. `auth` picks the signed-in stub. Rendered dark + light at 1440/390/320 and audited against the platform floors. The card states (task 1003301) walk the poster's ladder: the full poster, the artless two-up band, the all-null floor, the platform's own card.",
+  "_": "The hub's states for modules/ui-design/kit/render.js (task 1003320): name → url + actions + expectations. `auth` picks the signed-in stub. Rendered dark only at 1440/390/320 (the apex pins data-mode=\"dark\", task 1003336) and audited against the platform floors. The card states (task 1003301) walk the poster's ladder: the full poster, the artless two-up band, the all-null floor, the platform's own card.",
   "page": "/projects",
   "surface": "public-landing",
-  "modeQuery": "mode",
+  "modes": ["dark"],
+  "modeQuery": false,
   "ignoreRequests": ["/api/(gds|bongos)/me$", "/my-projects", "/provisioning/"],
   "ignoreConsole": ["/api/(gds|bongos)/me", "\\b401\\b", "Unauthorized"],
   "ignoreControls": [".skip", ".vh"],
   "states": {
     "out-map": { "auth": false, "expect": { "expanded": false } },
-    "in-map": { "auth": true, "expect": { "expanded": false, "count": [["#orbField .worldOrb[data-shape][data-style]", 4]], "attr": [["#selfOrb", "data-template", "pair-chrome"], ["#orbField a.worldOrb[data-origin=\"https://amazonprimea.com\"]", "data-template", "bead-wash"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-shape", "pair"], ["#orbField a.worldOrb[data-origin=\"https://emersonian-circles.cloudbongos.com\"]", "data-template", "bead-chrome"]] } },
+    "in-map": { "auth": true, "expect": { "expanded": false, "count": [["#orbField .worldOrb[data-shape][data-style]", 4]], "attr": [["#selfOrb", "data-template", "pair-chrome"], ["#orbField a.worldOrb[data-origin=\"https://amazonprimea.com\"]", "data-template", "bead-wash"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-shape", "pair"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-material", "gold"], ["#orbField a.worldOrb[data-origin=\"https://demo.cloudbongos.com\"]", "data-template", "pair-gold-wash"], ["#orbField a.worldOrb[data-origin=\"https://emersonian-circles.cloudbongos.com\"]", "data-template", "bead-obsidian-plain"]] } },
     "in-map-projects": { "auth": true, "actions": [["click", "#projTrig"], ["wait", 350]], "expect": { "expanded": true, "open": "#menuProjects" } },
     "in-map-profile": { "auth": true, "actions": [["click", "#who"], ["wait", 350]], "expect": { "expanded": true, "open": "#menuProfile" } },
     "in-map-kbd": { "auth": true, "actions": [["focus", "#projTrig"], ["press", "Enter"], ["wait", 350], ["press", "ArrowDown"], ["wait", 120]], "expect": { "expanded": true, "activeText": "Table" } },

package/public-landing/terms.html

@@ -1,5 +1,5 @@
 <!DOCTYPE html>
-<html lang="en">
+<html lang="en" data-mode="dark">
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
@@ -15,11 +15,7 @@
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400&family=Manrope:wght@300;400;500;600&display=swap">
 <link rel="stylesheet" href="/assets/cosmos.css">
-<script>
-/* Mode, resolved before first paint — the same contract as every landing page. */
-(function(){try{var m=localStorage.getItem('cb-color-mode');
-if(m==='light'||m==='dark')document.documentElement.setAttribute('data-mode',m);}catch(e){}})();
-</script>
+<!-- Dark only, like every apex page (task 1003336, ADR 0204): data-mode="dark" is fixed on <html>. -->
 <style>
 /* The reading column only. No :root block — the pack's injected theme owns the
    tokens (landing direction C1); everything below reads them. */

package/scripts/gds/worktree.js

@@ -11,6 +11,17 @@
 // junction BEFORE git worktree remove. Worktrees INSIDE the repo
 // (.claude/worktrees/<name>, the project default) need no junction at all.
 //
+// THE OTHER SHARED-STATE TRAP — `git stash` (task 1003344). The stash stack
+// belongs to the REPOSITORY, not the worktree: every worktree shares one stack
+// with the main checkout and with each other, so a stash here and a pop there
+// hands one agent another's tree and silently drops the original entry. Commit
+// on your own branch instead — a commit is worktree-local, a stash is not. The
+// full rule (named-stash escape hatch, clean-baseline advice, and the
+// `git fsck --unreachable` recovery path) has ONE canonical copy, in
+// scripts/gds/CLAUDE.md under "Gotchas / invariants", and is learning 1000215,
+// which claim.js surfaces at claim time. Deliberately short here: two full
+// copies of the same prose would drift apart.
+//
 // Usage:
 //   node scripts/gds/worktree.js add <task-id|name> [--path <dir> | --outside] [--base <ref>]
 //   node scripts/gds/worktree.js remove <name|path> [--force]

package/src/module-api.js

@@ -33,7 +33,7 @@ const { validateOrRespond, LIMITS, parseId, asyncHandler, corsPublicGet, parsePa
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.413'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.415'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/landing_legal_pages.mjs

@@ -160,3 +160,13 @@ for (const p of PAGES) {
     }
   });
 }
+
+// ── dark only (task 1003336) ──────────────────────────────────────────────
+
+test('the legal pages are dark only — data-mode="dark" fixed on <html>, no mode script (task 1003336)', () => {
+  for (const p of PAGES) {
+    const html = read(p.file);
+    assert.match(html, /^<html lang="en" data-mode="dark">/m, `${p.file}: dark is fixed on <html>`);
+    assert.doesNotMatch(html, /cb-color-mode|setAttribute\('data-mode'/, `${p.file}: nothing reads or writes a mode`);
+  }
+});

package/tests/landing_page.mjs

@@ -55,8 +55,6 @@ const PAGE_CSS = PAGE_STYLES.replace(/\/\*[\s\S]*?\*\//g, '');
 // The page script minus its comments — these assertions are about what the code
 // DOES, and the comments quote the very shapes being ruled out.
 const CODE = HTML.split('<script>').pop().replace(/\/\*[\s\S]*?\*\//g, '');
-// The pre-paint mode script, which is the FIRST <script> in <head>.
-const PREPAINT = HTML.split('<script>')[1].split('</script>')[0];
 
 // ── (1) the apex conditional ───────────────────────────────────────────────
 
@@ -255,11 +253,11 @@ test('every dark-mode rule is written twice — the block and its media twin (C2
   const explicit = (PAGE_CSS.match(/:root\[data-mode="dark"\]/g) || []).length;
   const media = (PAGE_CSS.match(/:root:not\(\[data-mode="light"\]\)/g) || []).length;
   assert.equal(explicit, media, 'a dark rule with no prefers-color-scheme twin only half-works');
-  // the shipped page writes four: the mode-toggle icon swap (.sun and .moon are
-  // one selector list each), the wide plate/geometry token block, and the two
-  // narrow ones. The floor is the count observed at the build, so deleting a
-  // twin fails even when the pair stays balanced.
-  assert.ok(explicit >= 4, `expected at least 4 dark rules, found ${explicit}`);
+  // the shipped page writes two: the wide plate/geometry token block and the
+  // narrow one (the mode-toggle icon swap left with the toggle, task 1003336).
+  // The floor is the count observed at the build, so deleting a twin fails even
+  // when the pair stays balanced.
+  assert.ok(explicit >= 2, `expected at least 2 dark rules, found ${explicit}`);
 });
 
 test('the page links world.css root-absolute, and does not fork the hub sheet', () => {
@@ -504,16 +502,15 @@ test('the tagline is one server-stamped string, split for the composition only',
   assert.match(PAGE_CSS, /h1 \.whole\{[^}]*white-space:normal/, 'the whole-tagline fallback must wrap');
 });
 
-test('the mode is resolved before first paint, and ?mode= wins', () => {
-  // A stored dark choice applied by the deferred script flashes the light page
-  // first; and ?mode= is how a reviewer walks both modes on one URL, which the
-  // render probes depend on.
-  assert.match(PREPAINT, /URLSearchParams\(location\.search\)\.get\('mode'\)/);
-  assert.match(PREPAINT, /localStorage\.getItem\('cb-color-mode'\)/);
-  assert.match(PREPAINT, /setAttribute\('data-mode'/);
-  // it is in <head>, ahead of the stylesheet link and the body
-  assert.ok(HTML.indexOf('cb-color-mode') < HTML.indexOf('<body>'));
-  assert.match(CODE, /localStorage\.setItem\('cb-color-mode', next\)/, 'the toggle persists the choice');
+test('the apex is dark only: data-mode="dark" is fixed on <html>, nothing reads or writes a mode (task 1003336)', () => {
+  // The owner's call on the planets review: light stays the builders' hall's.
+  // A fixed attribute beats a script — nothing to flash, nothing to persist,
+  // and the OS preference never reaches the page.
+  assert.match(HTML, /^<html lang="en" data-mode="dark">/m);
+  assert.doesNotMatch(HTML, /cb-color-mode/, 'no persisted choice is read or written');
+  assert.doesNotMatch(HTML, /URLSearchParams\(location\.search\)\.get\('mode'\)/, '?mode= no longer walks a second mode');
+  assert.doesNotMatch(HTML, /matchMedia\('\(prefers-color-scheme: dark\)'\)/, 'no OS-preference read in script');
+  assert.doesNotMatch(CODE, /setAttribute\('data-mode'/, 'nothing flips the mode');
 });
 
 // ── the assertions tests/platform_boot.mjs will make once the apex flips ───
@@ -530,13 +527,13 @@ test('the page satisfies the parked platform_boot assertions', () => {
 // the profile band. Everything a visitor can reach is markup; the script only
 // opens and closes. These pin the shape the grader could not see from a diff.
 
-test('the bar is markup: the mark, the Projects trigger, the mode glyph, the sign-in door (task 1003300)', () => {
+test('the bar is markup: the mark, the Projects trigger, the sign-in door — and no mode glyph (tasks 1003300, 1003336)', () => {
   const body = HTML.split('<body>')[1].split('<script>')[0];
   assert.match(body, /<header class="topbar bar">/, 'one bar, the hub\'s class beside the page\'s');
   assert.match(body, /<a class="barMark" href="\/" aria-label="\{\{productName\}\}">\s*<svg viewBox="0 0 26 20"/, 'the static mark is the way home, labelled from the stamped name');
   assert.match(body, /<span class="mark-word">\{\{productName\}\}<\/span>/, 'the product name as plain type, folded away under 900');
   assert.match(body, /<button class="trig" type="button" id="projTrig" data-menu="projects" aria-expanded="false" aria-controls="menuProjects">Projects<svg class="cv"/);
-  assert.match(body, /<button class="modeBtn" id="mode" type="button" aria-label="Toggle light or dark">/);
+  assert.doesNotMatch(body, /modeBtn|id="mode"|class="moon"|class="sun"/, 'the mode glyph left the bar — the apex is dark only (task 1003336)');
   assert.match(body, /<span class="whoSlot" id="who">\s*<a class="pill signin" href="\/api\/bongos\/auth\/web\/start\?return=\/">Sign in<\/a>\s*<\/span>/, 'the door stands in the identity slot until the session resolves');
   // what left with the pill bar
   assert.doesNotMatch(body, /class="pill nav-pill"|class="right-pills"|class="pill mark-pill"|data-nav="home"/, 'no nav pill, no right pills, no Home');

package/tests/projects_hub.mjs

@@ -16,6 +16,7 @@ import assert from 'node:assert/strict';
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { createRequire } from 'node:module';
 
 const ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), '..');
 const HUB = fs.readFileSync(path.join(ROOT, 'public-landing', 'projects.html'), 'utf8');
@@ -297,7 +298,7 @@ test('no id is declared twice — the wizard merge had four collisions to clear'
   // id makes the second node unreachable by getElementById and the first
   // silently wins. Scan the real markup only (JS builds ids like `dom-<iid>`
   // from fragments that would false-positive here).
-  const afterHead = HUB.slice(HUB.indexOf('</script>') + '</script>'.length);
+  const afterHead = HUB.slice(HUB.indexOf('<body'));
   const markup = afterHead.slice(0, afterHead.indexOf('<script>'));
   assert.ok(markup.includes('id="view-new"'), 'the markup slice must span the views');
   const ids = [...markup.matchAll(/\sid="([^"]+)"/g)].map((m) => m[1]);
@@ -1403,31 +1404,41 @@ test('the joinability in-flight line shares the visibility section’s push pred
 /* ── the planets and the field (task 1003319) — the map's orbs as the landing's
    chrome objects in the project's accent, a per-project template with a
    deterministic default walk, and the field brought to the world. ── */
-test('the planet templates: nine names, the walk changes shape and style each step, the catalog and the migration agree', () => {
-  const list = (SCRIPT.match(/var ORB_TEMPLATES = \[([^\]]*)\]/) || [, ''])[1];
-  const names = [...list.matchAll(/'([a-z-]+)'/g)].map((m) => m[1]);
-  assert.equal(names.length, 9);
-  assert.equal(new Set(names).size, 9, 'nine distinct templates');
-  for (const t of names) assert.match(t, /^(blob|pair|bead)-(tint|wash|chrome)$/);
-  for (let i = 1; i < names.length; i++) {
-    const [s0, y0] = names[i - 1].split('-');
-    const [s1, y1] = names[i].split('-');
-    assert.ok(s0 !== s1 && y0 !== y1, `walk step ${i} changes both shape and style`);
+const TEMPLATE_RE = /^(blob|pair|bead)-(tint|wash|chrome|(frost|gold|obsidian)-(tint|wash|plain))$/;
+const partsOf = (t) => { const p = t.split('-'); return p.length === 3 ? p : [p[0], 'chrome', p[1]]; };
+
+test('the planet templates: shape × material × style; the walk changes all three each step; the catalog and the migration agree (tasks 1003319, 1003337)', () => {
+  const walkList = (SCRIPT.match(/var ORB_WALK = \[([^\]]*)\]/) || [, ''])[1];
+  const walk = [...walkList.matchAll(/'([a-z-]+)'/g)].map((m) => m[1]);
+  assert.equal(walk.length, 12);
+  assert.equal(new Set(walk).size, 12, 'twelve distinct walk positions');
+  for (const t of walk) assert.match(t, TEMPLATE_RE);
+  for (let i = 0; i < walk.length; i++) {
+    const [s0, m0, y0] = partsOf(walk[(i + walk.length - 1) % walk.length]);
+    const [s1, m1, y1] = partsOf(walk[i]);
+    assert.ok(s0 !== s1 && m0 !== m1 && y0 !== y1, `walk step ${i} changes shape, material and style (wrapping)`);
   }
-  const pi = fs.readFileSync(path.join(ROOT, 'modules', 'platform-identity', 'platform-identity.js'), 'utf8');
-  const server = [...((pi.match(/const PROJECT_TEMPLATES = \[([\s\S]*?)\];/) || [, ''])[1]).matchAll(/'([a-z-]+)'/g)].map((m) => m[1]);
-  assert.deepEqual(server, names, 'the hub and the catalog walk the same list in the same order');
-  const mig = fs.readFileSync(path.join(ROOT, 'modules', 'platform-identity', 'migrations', 'platform_identity_012_project_template.sql'), 'utf8');
-  for (const t of names) assert.ok(mig.includes(`'${t}'`), `migration 012 names ${t}`);
+  const P = createRequire(import.meta.url)('../modules/platform-identity/platform-identity.js');
+  assert.deepEqual(P.PROJECT_TEMPLATE_WALK, walk, 'the hub and the catalog walk the same list in the same order');
+  // the client's full set is built from the same grammar the server builds it from
+  assert.match(SCRIPT, /var ORB_SHAPES = \['blob', 'pair', 'bead'\], ORB_MATERIALS = \['frost', 'gold', 'obsidian'\];/);
+  assert.match(SCRIPT, /ORB_SHAPES\.forEach\(function \(s\) \{ \['tint', 'wash', 'chrome'\]\.forEach\(function \(y\) \{ ORB_TEMPLATES\.push\(s \+ '-' \+ y\); \}\); \}\);/);
+  assert.match(SCRIPT, /ORB_SHAPES\.forEach\(function \(s\) \{ ORB_MATERIALS\.forEach\(function \(m\) \{ \['tint', 'wash', 'plain'\]\.forEach\(function \(y\) \{ ORB_TEMPLATES\.push\(s \+ '-' \+ m \+ '-' \+ y\); \}\); \}\); \}\);/);
+  assert.equal(P.PROJECT_TEMPLATES.length, 36);
+  for (const t of P.PROJECT_TEMPLATES) assert.match(t, TEMPLATE_RE);
+  for (const t of walk) assert.ok(P.PROJECT_TEMPLATES.includes(t), `the walk's ${t} is a valid name`);
+  const mig = fs.readFileSync(path.join(ROOT, 'modules', 'platform-identity', 'migrations', 'platform_identity_013_project_template_materials.sql'), 'utf8');
+  for (const t of P.PROJECT_TEMPLATES) assert.ok(mig.includes(`'${t}'`), `migration 013 names ${t}`);
 });
 
 test('the walk assigns the template by canonical position beside the accent; a curated template wins; the platform is the pair in chrome', () => {
-  assert.match(SCRIPT, /function assignAccents[\s\S]*?p\._acc = ORB_ACCENTS\[i % ORB_ACCENTS\.length\];\s*p\._tpl = ORB_TEMPLATES\[i % ORB_TEMPLATES\.length\];/,
+  assert.match(SCRIPT, /function assignAccents[\s\S]*?p\._acc = ORB_ACCENTS\[i % ORB_ACCENTS\.length\];\s*p\._tpl = ORB_WALK\[i % ORB_WALK\.length\];/,
     'one walk, two assignments');
-  assert.match(SCRIPT, /function templateOf\(p\) \{\s*return ORB_TEMPLATES\.indexOf\(p\.template\) !== -1 \? p\.template : \(p\._tpl \|\| ORB_TEMPLATES\[0\]\);/,
+  assert.match(SCRIPT, /function templateOf\(p\) \{\s*return ORB_TEMPLATES\.indexOf\(p\.template\) !== -1 \? p\.template : \(p\._tpl \|\| ORB_WALK\[0\]\);/,
     'a curated name wins; an unknown name is not a choice');
   assert.match(SCRIPT, /_acc: ORB_ACCENTS\[slugAccent\(inst\.slug\)\], _tpl: slugTemplate\(inst\.slug\)/, 'an owned-only entry walks by its slug');
-  assert.match(SCRIPT, /var tpl = templateOf\(p\), tplParts = tpl\.split\('-'\);\s*a\.setAttribute\('data-template', tpl\);\s*a\.setAttribute\('data-shape', tplParts\[0\]\);\s*a\.setAttribute\('data-style', tplParts\[1\]\);/,
+  assert.match(SCRIPT, /function slugTemplate\(slug\) \{ return ORB_WALK\[slugHash\(slug\) % ORB_WALK\.length\]; \}/, 'by the walk, not the whole set');
+  assert.match(SCRIPT, /var tpl = templateOf\(p\), tplParts = tpl\.split\('-'\);\s*a\.setAttribute\('data-template', tpl\);\s*a\.setAttribute\('data-shape', tplParts\[0\]\);\s*a\.setAttribute\('data-material', tplParts\.length === 3 \? tplParts\[1\] : 'chrome'\);\s*a\.setAttribute\('data-style', tplParts\[tplParts\.length - 1\]\);/,
     'the orb carries its template as data attributes; the sheet does the rest');
   assert.match(HUB, /<a class="worldOrb" id="selfOrb" href="\/" data-shape="pair" data-style="chrome" data-template="pair-chrome"/, 'the platform is its own mark');
 });
@@ -1455,6 +1466,43 @@ test("the planet is the landing's object on the landing's crop maths: the three
   assert.match(COSMOS, /--plate-bongos-cut:url\(\/assets\/world\/r2-bongos-chrome-a-cut\.webp\);/);
 });
 
+test('the materials (task 1003337): a whole object per plate, the crop recomputed from the cutout\'s alpha box; every plate ships with alpha and a sidecar', () => {
+  // the boxes measured from the shipped cutouts (alpha >= 16 on the 2048² plate); the sheet
+  // pads each side by 1.5% and derives zoom = 1/width, px/py = -u0/-v0 × zoom (square plates)
+  const BBOX = { 'frost-blob': { u0:0.168, u1:0.8223, v0:0.2495, v1:0.7642 }, 'frost-pair': { u0:0.0591, u1:0.9409, v0:0.2764, v1:0.7231 }, 'frost-bead': { u0:0.1685, u1:0.8066, v0:0.1738, v1:0.8198 }, 'gold-blob': { u0:0.1274, u1:0.8584, v0:0.1035, v1:0.9019 }, 'gold-pair': { u0:0.0552, u1:0.9458, v0:0.2739, v1:0.7383 }, 'gold-bead': { u0:0.0542, u1:0.9478, v0:0.0542, v1:0.9434 }, 'obsidian-blob': { u0:0.1885, u1:0.8018, v0:0.1177, v1:0.8979 }, 'obsidian-pair': { u0:0.0249, u1:0.9707, v0:0.3096, v1:0.7158 }, 'obsidian-bead': { u0:0.1416, u1:0.854, v0:0.1431, v1:0.8535 } };
+  const MARGIN = 0.015;
+  const f5 = (n) => { const s = n.toFixed(5); return s.replace(/^(-?)0\./, '$1.').replace(/\.?0+$/, '') || '0'; };
+  for (const [key, b] of Object.entries(BBOX)) {
+    const [material, shape] = key.split('-');
+    const U0 = Math.max(0, b.u0 - MARGIN), U1 = Math.min(1, b.u1 + MARGIN), V0 = Math.max(0, b.v0 - MARGIN), V1 = Math.min(1, b.v1 + MARGIN);
+    const w = U1 - U0, h = V1 - V0, zoom = 1 / w;
+    const rule = `.worldOrb[data-material="${material}"][data-shape="${shape}"]{--tpl-src:var(--plate-${material}-${shape}-cut);--tpl-ar:${f5(w / h)};--tpl-zoom:${f5(zoom)};--tpl-px:${f5(-U0 * zoom)};--tpl-py:${f5(-V0 * zoom)};}`;
+    assert.ok(COSMOS.includes(rule), `the ${key} crop follows from its box: ${rule}`);
+    assert.ok(COSMOS.includes(`--plate-${material}-${shape}-cut:url(/assets/world/r3-${material}-${shape}-cut.webp);`), `the ${key} plate token`);
+    const file = path.join(ROOT, 'public-landing', 'assets', 'world', `r3-${material}-${shape}-cut.webp`);
+    assert.ok(fs.existsSync(file), `${key}: the cutout ships`);
+    assert.ok(fs.existsSync(file + '.json'), `${key}: with its sidecar`);
+    const head = fs.readFileSync(file).subarray(0, 40).toString('latin1');
+    assert.ok(head.startsWith('RIFF') && head.includes('WEBP') && /ALPH|VP8X/.test(head), `${key}: WebP with an alpha chunk`);
+  }
+  assert.match(COSMOS, /\.worldOrb\[data-style="plain"\]\{--tpl-ink:transparent;--tpl-blend:normal;\}/, 'plain is the material as rendered');
+  // the material rules carry two attributes so they outrank the one-attribute chrome crops
+  assert.ok(COSMOS.indexOf('.worldOrb[data-material="frost"][data-shape="blob"]') > COSMOS.indexOf('.worldOrb[data-shape="bead"]{'), 'the materials follow the chrome crops');
+});
+
+test('the field carries a rendered backdrop (task 1003337): one token, cover, a slow transform drift, the plate and its sidecar on disk', () => {
+  assert.match(COSMOS, /--field-plate:url\(\/assets\/world\/r3-space-nebula\.jpg\);/, 'the pick is one token');
+  assert.match(COSMOS, /\.field \.ground\{position:absolute;inset:-4%;background:var\(--sky-bg\) var\(--field-plate\) center\/cover no-repeat;\}/);
+  assert.match(COSMOS, /@media \(prefers-reduced-motion:no-preference\)\{\s*\.field \.ground\{animation:groundDrift 90s ease-in-out infinite alternate;\}/, 'the drift only runs where motion is welcome');
+  assert.match(COSMOS, /@keyframes groundDrift\{from\{transform:translate3d\([^)]*\) scale\(1\.02\);\}to\{transform:translate3d\([^)]*\) scale\(1\.06\);\}\}/, 'transform only');
+  const plate = path.join(ROOT, 'public-landing', 'assets', 'world', 'r3-space-nebula.jpg');
+  assert.ok(fs.existsSync(plate) && fs.existsSync(plate + '.json'), 'the plate and its sidecar ship');
+  const side = JSON.parse(fs.readFileSync(plate + '.json', 'utf8'));
+  assert.equal(side.kind, 'backdrop');
+  assert.match(side.prompt, /pure black/i, 'a text-free plate on black');
+  assert.doesNotMatch(COSMOS, /\.field \.ground::after\{content:""/, 'nothing drawn over the plate');
+});
+
 test('the style is a blend on a masked colour layer; the accent never paints the box; the ring and the spotlight follow the silhouette', () => {
   assert.match(COSMOS, /\.worldOrb \.disc::before\{content:"";position:absolute;inset:0;\s*background-image:linear-gradient\(var\(--tpl-ink\),var\(--tpl-ink\)\),var\(--tpl-src\);/);
   assert.match(COSMOS, /background-blend-mode:var\(--tpl-blend\),normal;\s*-webkit-mask-image:var\(--tpl-src\);mask-image:var\(--tpl-src\);/, 'the mask is the plate itself');
@@ -1502,9 +1550,11 @@ test('the kit proves the field path: the fixture carries a curated template and
   const fixture = JSON.parse(fs.readFileSync(path.join(ROOT, 'modules', 'ui-design', 'kit', 'fixtures', 'featured.json'), 'utf8'));
   const otb = fixture.projects.find((p) => p.origin === 'https://amazonprimea.com');
   assert.equal(otb.template, 'bead-wash');
+  assert.equal(fixture.projects.find((p) => p.origin === 'https://demo.cloudbongos.com').template, 'pair-gold-wash', 'a material template rides the wire (task 1003337)');
   assert.ok(fixture.projects.every((p) => 'template' in p), 'the wire never drops the key');
   const states = JSON.parse(fs.readFileSync(path.join(ROOT, 'public-landing', 'projects.states.json'), 'utf8'));
   const attrs = states.states['in-map'].expect.attr.map((a) => a.join(' '));
   assert.ok(attrs.includes('#selfOrb data-template pair-chrome'));
   assert.ok(attrs.some((a) => a.includes('amazonprimea.com') && a.endsWith('data-template bead-wash')), 'the curated template reaches the orb');
+  assert.ok(attrs.some((a) => a.includes('demo.cloudbongos.com') && a.endsWith('data-material gold')), 'the material reaches the orb as its own attribute');
 });

package/tests/projects_hub_pre_uat.mjs

@@ -581,13 +581,14 @@ test('completed rail steps are a way back, the repo picker is honest ARIA, the c
   assert.equal((HUB.match(/aria-controls="projectsList"/g) || []).length, 5, 'the five state filters name the list they filter');
 });
 
-test('control nits: orb cursor, caret under reduced motion, mode label, home label, held reduce-motion query, target sizes', () => {
+test('control nits: orb cursor, caret under reduced motion, no mode switch, home label, held reduce-motion query, target sizes', () => {
   assert.doesNotMatch(COSMOS, /\.orb\{flex:0 0 54px;[^}]*cursor:pointer/, 'the base orb is not a pointer');
   assert.match(COSMOS, /\na\.orb\{cursor:pointer;\}/, 'only the linked orb is');
   assert.doesNotMatch(COSMOS, /\.orb\.ghost\{[^}]*cursor:default/);
   assert.doesNotMatch(HUB, /\.shell \.caret/, 'no caret to hide — the hub mark is static (task 1003300)');
-  assert.match(fn('paintModeToggle'), /el\.setAttribute\('aria-label', dark \? 'Switch to light mode' : 'Switch to dark mode'\);/);
-  assert.doesNotMatch(fn('paintModeToggle'), /aria-pressed/);
+  assert.doesNotMatch(SCRIPT, /modeToggle|paintModeToggle|resolvedMode|cb-color-mode/, 'the mode switch left the hub — the apex is dark only (task 1003336)');
+  assert.doesNotMatch(HUB, /id="modeToggle"|class="modeBtn"/);
+  assert.match(HUB, /^<html lang="en" data-mode="dark">/m, 'dark is fixed on <html>');
   assert.match(SCRIPT, /\$\('barMark'\)\.setAttribute\('aria-label', productName \+ ' — home'\);/, 'the mark — the only way home — is labelled from the product name');
   assert.match(SCRIPT, /var REDUCED_MQ = window\.matchMedia \? window\.matchMedia\('\(prefers-reduced-motion: reduce\)'\) : null;/);
   assert.match(SCRIPT, /if \(REDUCED\) stopSky\(\); else startSky\(\);/, 'a mid-session flip stops or restarts the sky');

package/tests/ui_design_kit.mjs

@@ -39,6 +39,12 @@ test('the shipped states files validate and sit beside the page they name', () =
     assert.deepEqual(v.errors, [], `${rel}: ${v.errors.join('; ')}`);
     assert.equal(path.basename(rel), `${lib.pageName(json.page)}.states.json`, `${rel} is named for its page`);
   }
+  // the apex is dark only (task 1003336): its states files name the one mode, and
+  // render.js reads it as the default so a plain `--page /` never renders light
+  for (const rel of ['public-landing/projects.states.json', 'public-landing/index.states.json']) {
+    assert.deepEqual(readJson(rel).modes, ['dark'], `${rel}: the apex renders dark only`);
+    assert.equal(readJson(rel).modeQuery, false, `${rel}: no query walks a second mode`);
+  }
 });
 
 test('the shipped probes files validate', () => {
@@ -60,6 +66,10 @@ test('a states file that breaks the contract is refused with the reason named',
   assert.ok(bad.errors.some((e) => /states\.ok\.auth/.test(e)));
   const stub = lib.validateStatesFile({ page: '/x', stub: { prefix: 'builders' }, states: { a: {} } });
   assert.ok(stub.errors.some((e) => /stub\.prefix/.test(e)));
+  const modes = lib.validateStatesFile({ page: '/x', modes: ['sepia'], states: { a: {} } });
+  assert.ok(modes.errors.some((e) => e.startsWith('modes:')), 'an unknown mode is refused');
+  assert.ok(lib.validateStatesFile({ page: '/x', modes: [], states: { a: {} } }).errors.some((e) => e.startsWith('modes:')), 'an empty modes list is refused');
+  assert.deepEqual(lib.validateStatesFile({ page: '/x', modes: ['dark'], states: { a: {} } }).errors, [], 'one declared mode is the dark-only shape');
 });
 
 test('a probes file needs a name and an expectation per probe, and cannot continue from nothing', () => {